IT Security Operations Specialist

NestAI; Tampere; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Occupational healthcare

Epassi Flex benefit

Lunch benefit

Auntie mental wellbeing services

Team lunches and all-hands events

Choice of Mac or PC

Holiday allowance

Phone benefit

Job summary

NestAI is seeking an IT Security Operations Specialist to own security operations across its IT domain. You will lead threat detection, incident response, and security policy enforcement in TL IV environments, with focus on endpoints, identity, networks, and SaaS security.

The role emphasizes vulnerability management, CSPM, and strong IAM controls, with collaboration across teams and adherence to ISO 27001 Annex A controls.

Qualifications

• 4+ years in IT security operations or SecOps.
• Strong experience with SIEM platforms and vulnerability tools.
• Hands-on with EDR solutions and IAM concepts (SSO, MFA, RBAC, PAM).
• Familiarity with cloud security (Azure/GCP/AWS) and incident playbooks.
• Excellent written/spoken English; Finnish language is a plus.

Responsibilities

• Lead security operations and incident response for IT infrastructure.
• Oversee SIEM implementation, alert triage, and threat intel gathering.
• Manage vulnerability scanning, remediation tracking, and incident playbooks.
• Enforce endpoint hardening, MFA, PAM, and access controls.
• Coordinate with vendors and implement security reviews for new tools.

Skills

IT security ops

SIEM

Threat intel

Incident response

English proficiency

Education

Security+ or equivalent

GCIA

GSEC

CEH

Tools

Splunk

Microsoft Sentinel

Elastic

Wazuh

Tenable

Qualys

Rapid7

CrowdStrike

Microsoft Defender

JumpCloud

Job description

Company

NestAI is a European AI lab for defence delivering the adaptive operating system for modern battlefield operations. We develop adaptive intelligence for unmanned and command systems: AI that continuously learns from operational data and adapts to changing conditions.

NestOS is our open, modular, and interoperable platform that enables this at scale and keeps capability evolution under sovereign European control. Founded in 2025 by Peter Sarlin, whose previous company Silo AI became Europe's largest AI acquisition, NestAI brings together over 150 engineers and scientists and partners with leading European defence forces and industry.

Role Description

We are looking for an IT Security Operations Specialist to join our IT team. As NestAI's infrastructure scales rapidly, operates in TL IV classified environments, and conforms to various certifications and standards, this role serves as the single accountable owner for all security operations within the IT domain.

Reporting directly to IT Operations, you will systematically raise our internal security posture, manage threat detection and incident response, and enforce robust policies across our endpoint, identity, network, and SaaS ecosystems.

This role focuses specifically on internal IT security operations. Infrastructure administration, product/software security architecture, DevSecOps pipelines, and physical facility security are managed by dedicated parallel teams.

What You Will Own

• Lead SIEM implementation, daily alert triage, threat intelligence gathering, and Cloud Security Posture Management (CSPM).
• Own vulnerability scanning, remediation tracking, penetration testing coordination, and incident response playbooks for IT infrastructure.
• Manage EPP/EDR solutions, enforce endpoint hardening, BYOD policies, encryption, MFA, PAM, RBAC, and access recertifications.
• Oversee firewall rule reviews, network segmentation, email security (SPF/DKIM/DMARC), DLP, and security reviews for new software tools and vendors.
• Handle access controls, logging, and incident procedures for TL IV classified environments, while developing IT security policies, conducting phishing simulations, and managing ISO 27001 Annex A controls.

Qualifications

• Solid experience (equivalent to 4+ years of experience) in IT security operations, SecOps, or a similar hands-on internal security role.
• Strong working knowledge of SIEM platforms (e.g., Splunk, Microsoft Sentinel, Elastic, Wazuh) and vulnerability management tools (e.g., Tenable, Qualys, Rapid7).
• Hands-on experience with EDR/EPP solutions (e.g., CrowdStrike, SentinelOne, Microsoft Defender) and deep understanding of IAM (SSO, MFA, RBAC, PAM, Directory Services).
• Familiarity with cloud security (Azure, GCP, or AWS), CSPM tools, and experience writing security policies and incident response playbooks.
• Strong written and spoken English. Fluency in the Finnish language is considered as an advantage.
• Pluses: Relevant certifications (Security+, GSEC, GCIA, CEH), experience in ISO 27001 Annex A mapping, experience in TL IV or accredited/classified environments, MDM platform knowledge (JumpCloud, FleetDM, Workspace ONE).

Why join NestAI

At NestAI, you'll build meaningful, real-world technology as part of a world-class team of engineers, scientists, and experienced professionals. You'll work on systems where reliability genuinely matters, contribute to Europe's security and resilience, and solve problems that demand depth, trust, and craftsmanship.

If you want to build with purpose - and with leading experts in the field - you've come to the right place.

Perks & Benefits

We offer a growing set of practical benefits to support your work and wellbeing, day to day:

• Occupational healthcare (currently provided by Mehiläinen)
• Epassi Flex benefit (sports, culture, commuting, wellbeing)
• Lunch benefit (25% tax-free coverage)
• Auntie (mental wellbeing services)
• Regular team lunches and all-hands events
• Your choice of Mac or PC
• Holiday allowance (50% of holiday salary)
• Phone benefit according to company policy (subscription and device)

Practicalities

Employment is subject to applicable security screening (including SUPO, where required).

NestAI is an equal opportunity employer. We consider all applicants based on their skills, experience, and potential.

We are currently unable to provide visa sponsorship or international relocation support for this position. Candidates must already be based in Finland or in the EU and have a valid work permit for this region at the time of application.